Working on client "auth handler" API design...